Shulou(Shulou.com)06/01 Report--

Directory resolution:

Form: / 8090sec.asp/8090sec.jpg

8090.sec.asp is a folder, 8090sec.jpg is an asp*** file with a suffix to jpg format, 8090sec.jpg can be replaced with any text file (e.g. 8090sec.txt), and IIS6.0 parses 8090sec.jpg to asp files.

Suffix resolution

IIS6.0 will successfully parse this kind of suffix file into asp file either / 8090sec.aspter.jpg or / 8090sec.asp:.jpg (you need to change the file name here).

. Default resolution

/ 8090sec.asa / 8090sec.cer / 8090sec.cdx, the default executable file for IIS6.0 contains these three types in addition to asp

07. You can contact here to exploit directory parsing vulnerabilities / 8090sec.asa/8090sec.jpg or / 8090sec.cer/8090sec.jpg or 8090sec.asater.jpg

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.